Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9af6e2db-c25d-3f6d-a18a-1632b95dbc41.roa
File:                     9af6e2db-c25d-3f6d-a18a-1632b95dbc41.roa (raw, json)
Hash identifier:          LKMJW9ASptPKY6vs66/yr4WTnKFl0jqjYgy2jiy1Cjs=
Subject key identifier:   86:C1:FF:B0:F1:98:0B:80:99:1B:22:D2:7A:89:D9:C4:71:82:13:C3
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845B38375E7273D6B78A54E4280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9af6e2db-c25d-3f6d-a18a-1632b95dbc41.roa
Signing time:             Mon 29 Apr 2024 01:00:25 +0000
ROA not before:           Mon 29 Apr 2024 01:00:25 +0000
ROA not after:            Sun 28 Jul 2024 01:00:25 +0000
asID:                     398266
IP address blocks:        2001:470:3b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b3:83:75:e7:27:3d:6b:78:a5:4e:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Apr 29 01:00:25 2024 GMT
            Not After : Jul 28 01:00:25 2024 GMT
        Subject: CN=b3db1f57-e0f6-41e5-9435-2fecc456b74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:c7:da:6c:79:1c:60:85:b6:68:05:1d:bd:
                    70:93:e3:36:83:d7:f9:0d:e7:1a:c7:9e:9b:94:35:
                    b9:a4:e4:e9:97:ee:bf:23:b4:16:81:f2:57:0f:1a:
                    9e:aa:e1:55:2d:15:71:5e:5b:da:6b:c6:f3:8a:be:
                    73:f8:e6:c6:81:36:a8:75:89:16:73:e9:c3:b6:f0:
                    fa:52:88:82:4c:f5:8d:49:00:fd:3f:24:0c:bf:80:
                    19:31:11:7d:8c:01:50:84:b8:40:f4:d7:ac:b5:c1:
                    8e:f1:ba:78:90:c3:83:73:bc:b4:43:a9:dd:97:02:
                    07:30:3d:6b:18:5d:ee:cf:c3:c5:6f:18:0b:03:88:
                    38:e5:f8:9f:f5:25:b7:23:f5:0f:46:74:d0:fa:7a:
                    a7:2e:b0:03:01:53:ad:cb:07:e6:95:e5:7f:ed:08:
                    d2:5a:28:c5:c6:86:55:1c:d8:63:af:c9:ab:f2:aa:
                    8e:a3:bc:10:93:59:d9:18:8b:15:10:e0:77:09:a9:
                    bf:bd:b1:f5:e5:8a:d1:a2:9d:1d:e0:67:48:e2:96:
                    d0:6e:8d:06:88:f5:22:10:66:70:6b:d3:23:6b:d2:
                    a4:f1:f0:71:b7:af:df:67:7a:c3:77:06:d8:d9:73:
                    31:c7:9e:90:9d:2f:8c:26:c6:df:39:ef:a6:cf:18:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:FF:B0:F1:98:0B:80:99:1B:22:D2:7A:89:D9:C4:71:82:13:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/9af6e2db-c25d-3f6d-a18a-1632b95dbc41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:3b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:43:e2:80:46:a2:91:25:17:38:b7:99:77:55:0e:56:33:b5:
         4f:34:41:7f:bd:f3:f3:d5:8e:09:9c:82:5a:8a:fd:5a:ee:bf:
         17:72:ed:af:36:2c:93:1c:83:ec:da:7c:72:d2:15:e4:30:51:
         38:8e:e2:fa:c8:7d:14:fd:04:63:e8:8a:6d:f3:9b:61:76:b7:
         ce:dc:47:dd:1d:cb:df:bd:d5:cc:9a:9f:4c:d8:d0:1e:60:fa:
         1c:19:d2:6c:8b:62:a6:e1:bc:f1:c6:d4:89:c4:e9:bf:88:31:
         d8:b0:73:b9:73:b5:39:4f:9f:cb:bd:ee:37:bc:9d:13:1a:95:
         c6:dd:c6:fb:75:18:98:d8:aa:2b:3c:a1:20:7d:19:a6:61:ad:
         c5:e6:0b:c1:90:eb:15:93:b4:c2:ba:5d:5d:e0:e3:5d:d8:fc:
         60:29:60:75:04:b3:19:9c:ba:0e:ac:92:d4:18:9b:0f:cc:21:
         f9:4e:a3:ed:22:79:35:eb:84:4c:c1:5a:4c:58:79:fd:d3:57:
         6c:8d:dd:0a:7f:ae:f8:e4:af:50:ad:f3:ac:c2:fc:7b:e0:18:
         c1:9a:a9:2a:12:18:48:77:6b:a5:18:9e:ac:c0:07:30:c4:78:
         83:d2:eb:c5:b5:ff:72:d5:e0:ec:aa:4e:52:f6:85:32:84:e9:
         45:b7:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:38:25 2024 by rpki-client on console-ams.rpki-client.org